Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
File: pbJlTkMrdNyNpm2BayYM_8gXMXU.mft (raw, json)
Hash identifier: zknIk+tpKKej3eGQs78kuTwkl8TVpVLtsHUFXsHxpBc=
Subject key identifier: DA:43:11:A9:D7:3A:6C:80:76:B2:A9:C8:BA:77:B9:10:99:C9:DD:90
Authority key identifier: A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
Certificate issuer: /CN=a5b2654e432b74dc8da66d816b260cffc8173175
Certificate serial: 019CAA5857F29EAC366F41A42265E641BDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 17:00:42 +0000
Manifest this update: Sun 01 Mar 2026 17:00:42 +0000
Manifest next update: Mon 02 Mar 2026 17:00:42 +0000
Files and hashes: 1: pbJlTkMrdNyNpm2BayYM_8gXMXU.crl (hash: zCyInY8hS1MdyvRhA+6x7MQ17dxXpT1SMRzIYIUTAjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:57:f2:9e:ac:36:6f:41:a4:22:65:e6:41:bd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b2654e432b74dc8da66d816b260cffc8173175
Validity
Not Before: Mar 1 17:00:42 2026 GMT
Not After : Mar 2 17:00:42 2026 GMT
Subject: CN=da4311a9d73a6c8076b2a9c8ba77b91099c9dd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f9:58:8b:2f:5d:e5:d4:1b:5c:55:84:76:6d:
e8:83:37:73:94:13:20:82:20:08:00:78:22:39:d1:
a3:05:cb:fe:50:31:73:f9:1e:89:ad:f1:1f:73:ef:
2a:2f:43:33:8f:e2:29:ee:ff:d0:e5:4a:97:c7:e1:
5e:29:17:43:db:cf:24:e9:72:17:24:1b:55:de:b6:
3d:38:3a:c7:ea:d6:33:3e:19:9c:aa:28:c1:3b:98:
72:d5:ee:87:9d:21:0b:25:c8:06:d5:14:43:3e:e2:
fb:5e:d5:d9:c1:8f:a7:c2:ad:95:af:c1:f8:c2:3f:
2b:09:19:d7:65:1f:7f:96:7f:b8:ce:4a:19:af:79:
6d:d3:20:b6:e5:50:36:9d:29:37:86:b9:14:2d:d7:
cf:4f:9e:11:24:79:84:c2:5a:97:76:fd:34:40:ef:
a8:1c:dd:ab:34:2a:09:dd:b8:fe:10:88:5a:50:dd:
55:37:e7:f1:c9:6d:e4:b5:3f:2d:11:ab:23:02:6f:
d5:b4:59:6a:d5:a7:47:35:71:80:a2:e2:82:d2:d9:
bb:92:7f:f3:db:8c:f4:ad:2f:b4:94:69:28:86:67:
91:5d:20:aa:96:da:d3:d2:2b:8d:88:10:72:70:0f:
a2:06:43:c7:d6:4e:f0:95:e5:2e:e5:26:01:6b:e7:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:43:11:A9:D7:3A:6C:80:76:B2:A9:C8:BA:77:B9:10:99:C9:DD:90
X509v3 Authority Key Identifier:
keyid:A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fe:d5:2d:9e:54:de:45:46:30:f3:2b:85:d6:3d:d9:b7:52:
f2:4a:ef:80:95:77:b7:c5:e8:b4:c7:f2:81:8c:74:02:92:5c:
48:26:50:60:80:a1:4f:fa:c8:9d:b1:83:fe:5d:32:d7:b0:60:
d8:80:a7:61:05:d0:a6:a0:26:96:ea:33:5a:ba:57:28:1f:f0:
11:d7:b8:70:4c:3a:32:03:9a:c2:ff:32:bc:bd:f5:21:64:63:
87:3c:48:aa:cd:f7:bf:b4:b8:84:13:81:85:5f:df:29:81:26:
ec:36:c2:d2:3a:45:24:b9:cb:37:4c:54:b9:1a:1a:99:4d:88:
a0:2e:dd:76:32:15:a8:e0:bd:47:21:10:93:d0:01:32:75:62:
25:e7:15:08:0f:f6:28:33:c2:25:b4:19:9e:a6:3f:c3:06:5c:
47:e5:67:8e:cd:b9:4f:e9:cb:ac:46:dc:84:9e:ed:2b:ee:f0:
7e:4b:c4:b9:a3:fa:b4:63:59:e1:e2:48:5e:7e:66:3a:50:58:
78:8c:2d:41:e6:91:07:23:f0:0f:32:c0:bb:9c:2a:18:47:52:
5f:ad:27:d2:85:09:e9:26:48:fb:90:02:53:59:2c:81:90:2b:
ae:15:e4:9a:c6:16:41:86:cd:b8:3b:c3:53:57:32:12:70:13:
5f:07:8b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:14 2026 by rpki-client